CVE-2017-2824

An exploitable code execution vulnerability exists in the trapper command functionality of Zabbix Server 2.4.X

published May 24, 2017

CVSS

—

EPSS

26%

Percentile

98.0

In the wild

Unconfirmed

What it is

An exploitable code execution vulnerability exists in the trapper command functionality of Zabbix Server 2.4.X. A specially crafted set of packets can cause a command injection resulting in remote code execution. An attacker can make requests from an active Zabbix Proxy to trigger this vulnerability.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.25897 · 98.0th percentile
Published: 2017-05-24T14:00Z

EPSS history

Timeline

24 MAY 14:00Z
An exploitable code execution vulnerability exists in the trapper command functionality of Zabbix Server 2.4.X
cvelistv5